Information Security Leadership and Strategic Objectives

This document is a technical report that outlines the strategic objectives and current technology stack of an Information Technology leader at Citi. The report details key departmental objectives for the next 6 to 12 months, which include understanding insider risks, implementing Secure Access Service Edge (SASE) at scale, enhancing the Security Operations Center (SOC), and integrating artificial intelligence (AI) solutions. It also describes the current technology stack utilized, which includes tools such as Rapid7, Crowdstrike, and Palo Alto. The document specifies a budget of up to $20 million for the department and $1.5 million for a project focused on exploring Data Loss Prevention (DLP) solutions to protect sensitive data. Additionally, it identifies anticipated challenges such as complexity and legal requirements, and outlines strategic technology priorities for the upcoming year, emphasizing the importance of leveraging AI for threat detection and creating a Zero Trust environment.